Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
File:                     7bkm-MYDqrectGqIO_YyVko_qr8.mft (raw, json)
Hash identifier:          HE1uLyKpLnYsqhlp2vHVZHjI5vdt7rlYAQmOxFwpNc4=
Subject key identifier:   15:2B:B0:9E:53:DE:F2:31:77:61:A5:78:F1:9D:43:76:34:93:21:F9
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Certificate issuer:       /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial:       019F11531E4098D2F702B271041998229AA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
Manifest number:          19B4
Signing time:             Mon 29 Jun 2026 03:01:27 +0000
Manifest this update:     Mon 29 Jun 2026 03:01:27 +0000
Manifest next update:     Tue 30 Jun 2026 03:01:27 +0000
Files and hashes:         1: 7bkm-MYDqrectGqIO_YyVko_qr8.crl (hash: 5YC1RdtKGnxZ04BYbq6dtsZbnU9S+Ba5D7otxk2S9SA=)
                          2: ZOavrk-QF97rJP_2jNT7lmVgOvE.roa (hash: r2s3h1w3Hjfzrez9cKoP8cqtXCYOTfAkva8ue3B7Z2Q=)
                          3: b4zo6KiTgoc5L-wE1iEGLa3ot54.roa (hash: 7qq5CHWNx2oa5BEGotuEcxfckS6TczcC6U6UJrqCLzo=)
                          4: ffZakNnkJ9qo1A3shFhtl9qXd_Q.roa (hash: zf21A+pRvsATbzNE1edRMBnzKSA0PFpPQRbeA3NRvG4=)
                          5: i5sVIykITJhFoNGVdqX3qFf6Cc0.asa (hash: z2bcBM4bF0FCwzKB9WKDbXNW4is6WFRzNqcdWd30bYM=)
                          6: yAkFpEjxzs83ywPRwqAL5e8lJeY.asa (hash: UIEBVxj1ZzIVrxFkEdeMxmISP4feVXlw74eOZ0lv+Sk=)
                          7: ySpczFe0bFDpQcjPCdkMrRLgsk4.roa (hash: 4bkzvAWfxVndAxO5MdGK6YbLnfuFOHsrNBENCi5CdAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:53:1e:40:98:d2:f7:02:b2:71:04:19:98:22:9a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
        Validity
            Not Before: Jun 29 03:01:27 2026 GMT
            Not After : Jun 30 03:01:27 2026 GMT
        Subject: CN=152bb09e53def2317761a578f19d4376349321f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7e:e7:b5:ff:c7:ad:52:fa:ff:50:02:9b:1b:
                    92:ff:1b:e6:7d:66:34:35:19:d1:8f:50:72:e4:83:
                    2c:4d:44:27:bc:e1:1e:94:1e:3d:60:bf:9d:b7:b4:
                    80:83:c1:c9:5d:cc:44:06:1e:6e:1c:a8:9c:7e:b6:
                    53:68:ed:6f:8d:44:98:12:d8:65:ca:64:e8:e4:d9:
                    00:2c:c7:e3:ab:01:4e:ae:f3:52:7e:d8:aa:9d:c1:
                    a6:28:ca:d3:ef:f3:3f:4d:e2:22:53:4d:c5:55:39:
                    f8:1c:e6:94:25:83:a5:6e:e9:3e:70:a3:11:a3:c9:
                    a8:e8:e4:86:16:2a:c9:98:3f:24:a3:98:31:63:9b:
                    6c:c5:69:e7:e3:c9:09:93:e8:c6:9a:9e:94:47:ab:
                    d8:f1:6f:3d:23:68:2f:80:d0:b2:46:b4:e3:d9:a8:
                    d3:8a:ec:a1:6a:9e:b6:90:20:a9:b0:98:81:3e:c7:
                    ee:8a:46:ff:1c:35:76:3a:97:af:1b:49:e1:85:29:
                    05:24:3e:8c:be:cc:6d:de:03:9e:d0:e3:8f:ff:dd:
                    33:c1:44:ee:36:45:7a:ee:70:59:27:e1:6a:7a:2a:
                    b0:ba:d4:1a:9a:79:05:d9:f2:62:d1:09:c6:e6:34:
                    af:ce:eb:80:f6:9e:6a:8b:31:ce:5a:6c:16:ff:cf:
                    54:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:2B:B0:9E:53:DE:F2:31:77:61:A5:78:F1:9D:43:76:34:93:21:F9
            X509v3 Authority Key Identifier:
                keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:90:9a:13:0d:eb:3d:32:de:d8:6e:01:35:05:93:87:2d:eb:
         1d:f4:5b:4a:dc:e1:1b:32:8f:e0:4c:b8:1a:d2:46:62:b3:4d:
         10:92:ba:61:7f:25:1d:7e:03:91:2c:35:f6:5a:62:42:2b:f3:
         87:d6:61:58:c4:37:6c:87:ee:85:b7:e1:0a:62:75:c5:2d:80:
         df:c2:48:b6:b0:c7:d2:d2:88:80:00:03:51:c2:eb:ac:3c:21:
         7f:7a:f4:64:55:f5:d2:bb:a8:08:04:c4:30:34:45:a1:f7:09:
         c2:ee:09:b0:40:27:1b:10:cc:30:bf:4a:f8:dc:9d:b5:cb:93:
         14:69:45:1e:e7:1d:05:09:88:a9:b3:91:ee:03:f6:94:35:13:
         43:1b:e5:ad:79:ca:1f:4d:9d:be:be:8d:08:41:f0:ad:7f:aa:
         48:c5:35:de:88:fb:9f:7c:20:9f:46:68:6a:01:fb:a0:34:30:
         71:b8:41:5a:6b:0c:bb:10:e7:7c:97:12:af:9e:a8:78:d8:fa:
         df:49:54:cd:f3:a4:b0:a0:4f:df:1a:fc:98:bd:d6:06:26:96:
         a7:e6:81:38:e5:02:ac:ec:6a:a7:40:7d:ce:e8:a5:f0:6a:c9:
         6d:09:87:7f:ed:b3:69:f2:21:eb:ce:9e:7b:0c:83:9b:a5:5a:
         c0:16:d5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:37:50 2026 by rpki-client